Abstract: Techniques for providing application-independent access control in a cloud-services computing environment are provided. In one embodiment, a method for providing application-independent access control is provided. The method includes obtaining a user identity for accessing the cloud-services computing environment and receiving a user request to perform a task using an application. The method further includes collecting process-related data for performing the task using the application and obtaining one or more network routing addresses. The method further includes determining, based on the user identity, the process-related data, and the one or more network routing addresses, whether the task is to be performed. If that the task is to be performed, the task is caused to be performed using the application; and if the task is not to be performed, the user request is denied.

Abstract: In accordance with an embodiment, described herein is a system and method for use of a multi-tenant application server with a multitasking virtual machine. The multi-tenant application server enables the definition of one or more partitions that provide a runtime and administrative subdivision or slice of an application server domain; while the multitasking virtual machine enables safe, secure, and scalable multitasking of software applications. Applications can be deployed a resource group scoped either to a domain or to a particular partition, or to a resource group template at the domain level. Partitions running on a managed server instance within the domain can share the multitasking virtual machine, which provides each partition with its own subdivision or slice of that multitasking virtual machine.

Abstract: In accordance with an embodiment, described herein is a system and method for providing multitenancy support in a platform as a service or cloud computing environment. A platform component enables a service runtime to be shared by multiple tenants, by providing each tenant with a dedicated share or slice of a runtime instance. Each share/slice can be isolated from other shares/slices with respect to factors such as, for example, configuration, or quality of service. In accordance with an embodiment, during provisioning of a particular service runtime, a runtime definition associated with the service runtime can be utilized, for example by a service management engine, to configure the platform component to install one or more services within the service runtime. A particular service and its service runtimes can also be provisioned, within one or more runtime pools, according to a service runtime definition and placement configuration.

Abstract: In accordance with an embodiment, described herein is a system and method for supporting patching in a multi-tenant application server environment. The system can associate one or more partitions with a tenant, for use by that tenant, wherein a partition is a runtime and administrative subdivision or slice of a domain. A patching process can take advantage of high-availability features provided by an application server clustering environment, to apply patches in a controlled, rolling restart, which maintains a domain's ability to operate without interruption, or with zero downtime. The process can be used to automate complex or long running tasks, including preserving an unpatched or prior version of an application server, application, or other software component for possible rollback, or providing automatic reversion in the event of an unrecoverable error.

Abstract: In accordance with an embodiment, described herein is a system and method for providing multitenancy support in a platform as a service or cloud computing environment. A platform component enables a service runtime to be shared by multiple tenants, by providing each tenant with a dedicated share or slice of a runtime instance. Each share/slice can be isolated from other shares/slices with respect to factors such as, for example, configuration, or quality of service. In accordance with an embodiment, during provisioning of a particular service runtime, a runtime definition associated with the service runtime can be utilized, for example by a service management engine, to configure the platform component to install one or more services within the service runtime. A particular service and its service runtimes can also be provisioned, within one or more runtime pools, according to a service runtime definition and placement configuration.

Abstract: In accordance with an embodiment, described herein is a system and method for providing an end-to-end lifecycle in a multi-tenant application server environment. A lifecycle manager enables configuration integration across different components, for example application servers, traffic directors or load balancers, and database or other components, which may have their own partition-specific configurations. In accordance with an embodiment, the end-to-end lifecycle infrastructure includes a plugin-based mechanism which enables the different components within a multi-tenant application server environment to use a lifecycle plugin to provide their own component-specific lifecycle functionality. In accordance with an embodiment, the system includes support for a tenant onboarding functionality, which can be used to onboard a tenant for a service to a particular partition. In accordance with an embodiment, the system supports the use of a global runtime within the multi-tenant application server environment.

Abstract: In accordance with an embodiment, described herein is a system and method for providing an end-to-end lifecycle in a multi-tenant application server environment. A lifecycle manager enables configuration integration across different components, for example application servers, traffic directors or load balancers, and database or other components, which may have their own partition-specific configurations. In accordance with an embodiment, the end-to-end lifecycle infrastructure includes a plugin-based mechanism which enables the different components within a multi-tenant application server environment to use a lifecycle plugin to provide their own component-specific lifecycle functionality. In accordance with an embodiment, the system includes support for a tenant onboarding functionality, which can be used to onboard a tenant for a service to a particular partition. In accordance with an embodiment, the system supports the use of a global runtime within the multi-tenant application server environment.

Abstract: In accordance with an embodiment, described herein is a system and method for providing a clone a service in a cloud platform environment. The system can clone a source service within a service domain or across service domains, by creating a new service from a same service definition package used for creating the source service, extracting post-provision changes from the source service, e.g., user applications and post-provision configurations, and applying the changes to the new service.

Abstract: In accordance with an embodiment, described herein is a system and method for providing multitenancy support in a platform as a service or cloud computing environment. A platform component enables a service runtime to be shared by multiple tenants, by providing each tenant with a dedicated share or slice of a runtime instance. Each share/slice can be isolated from other shares/slices with respect to factors such as, for example, configuration, or quality of service. In accordance with an embodiment, during provisioning of a particular service runtime, a runtime definition associated with the service runtime can be utilized, for example by a service management engine, to configure the platform component to install one or more services within the service runtime. A particular service and its service runtimes can also be provisioned, within one or more runtime pools, according to a service runtime definition and placement configuration.

Abstract: In accordance with an embodiment, described herein are a system and method for partition-scoped patching in an application server environment. A computer environment includes an application server, for example a multitenant application server, that supports the use of one or more partitions, wherein each partition provides an administrative and runtime subdivision of a domain. During a partition-scoped rollout of a patch or update, to a resource group or application within a plurality of servers or clusters of servers, the resource group or application can be updated within a targeted partition, using a patch orchestrator and partition lifecycle runtime interface, without affecting the operation of other partitions at those servers or clusters of servers. One or more session handling flags can be used, to enable sessions and/or requests that are associated with the targeted partition, to be handled by a traffic director, during the patching process.

Abstract: In accordance with an embodiment, described herein is a system and method for exporting and importing a PaaS service and associated configurations across service domains are provided. The system comprises a cloud platform component provided as an installable software suite within a cloud environment; a test to production (T2P) framework module that includes a PaaS plugin and a plurality of T2P plugins and tools; and a user interface where the plugins and tools can be invoked to export domain configurations from a source service domain, and import the domain configurations to a target domain. In accordance with an embodiment, the system further includes a service provider interface (SPI) that can be implemented by an SME of each service housed in a service domain, to provide service backup and restore functionalities for exporting and importing that service.

Abstract: In accordance with an embodiment, described herein is a system and method for partition migration in a multitenant application server environment. Each resource group, or partition which includes that resource group, can be associated with a virtual target (e.g., virtual host) information that defines a target to which that resource group or partition should be targeted and deployed. A web tier component (e.g., Oracle Traffic Director) includes a routing information, which maps the virtual target for a partition to a corresponding target such as a server or cluster, so that requests for that partition are directed to the appropriate target, for example as part of one or more sessions. When a partition is migrated, session information is replicated between an original target and a new target, and the web tier component provided with a revised routing information, so that subsequent requests for that partition are directed to the new target.

Abstract: In accordance with an embodiment, described herein is a system and method for providing multitenancy support in a platform as a service or cloud computing environment. A platform component enables a service runtime to be shared by multiple tenants, by providing each tenant with a dedicated share or slice of a runtime instance. Each share/slice can be isolated from other shares/slices with respect to factors such as, for example, configuration, or quality of service. In accordance with an embodiment, during provisioning of a particular service runtime, a runtime definition associated with the service runtime can be utilized, for example by a service management engine, to configure the platform component to install one or more services within the service runtime. A particular service and its service runtimes can also be provisioned, within one or more runtime pools, according to a service runtime definition and placement configuration.

Abstract: In accordance with an embodiment, described herein is a system and method for providing an end-to-end lifecycle in a multi-tenant application server environment. A lifecycle manager enables configuration integration across different components, for example application servers, traffic directors or load balancers, and database or other components, which may have their own partition-specific configurations. In accordance with an embodiment, the end-to-end lifecycle infrastructure includes a plugin-based mechanism which enables the different components within a multi-tenant application server environment to use a lifecycle plugin to provide their own component-specific lifecycle functionality. In accordance with an embodiment, the system includes support for a tenant onboarding functionality, which can be used to onboard a tenant for a service to a particular partition. In accordance with an embodiment, the system supports the use of a global runtime within the multi-tenant application server environment.

Abstract: In accordance with an embodiment, described herein is a system and method for supporting patching in a multi-tenant application server environment. The system can associate one or more partitions with a tenant, for use by that tenant, wherein a partition is a runtime and administrative subdivision or slice of a domain. A patching process can take advantage of high-availability features provided by an application server clustering environment, to apply patches in a controlled, rolling restart, which maintains a domain's ability to operate without interruption, or with zero downtime. The process can be used to automate complex or long running tasks, including preserving an unpatched or prior version of an application server, application, or other software component for possible rollback, or providing automatic reversion in the event of an unrecoverable error.

Abstract: In accordance with an embodiment, described herein is a system and method for supporting patching in a multi-tenant application server environment. The system can associate one or more partitions with a tenant, for use by that tenant, wherein a partition is a runtime and administrative subdivision or slice of a domain. A patching process can take advantage of high-availability features provided by an application server clustering environment, to apply patches in a controlled, rolling restart, which maintains a domain's ability to operate without interruption, or with zero downtime. The process can be used to automate complex or long running tasks, including preserving an unpatched or prior version of an application server, application, or other software component for possible rollback, or providing automatic reversion in the event of an unrecoverable error.

Abstract: In accordance with an embodiment, described herein is a system and method for providing an end-to-end lifecycle in a multi-tenant application server environment. A lifecycle manager enables configuration integration across different components, for example application servers, traffic directors or load balancers, and database or other components, which may have their own partition-specific configurations. In accordance with an embodiment, the end-to-end lifecycle infrastructure includes a plugin-based mechanism which enables the different components within a multi-tenant application server environment to use a lifecycle plugin to provide their own component-specific lifecycle functionality. In accordance with an embodiment, the system includes support for a tenant onboarding functionality, which can be used to onboard a tenant for a service to a particular partition. In accordance with an embodiment, the system supports the use of a global runtime within the multi-tenant application server environment.

Abstract: In accordance with an embodiment, described herein is a system and method for providing service expiration in a cloud computing environment. In accordance with an embodiment, the system includes a plurality of services which can be used by applications within the cloud environment, wherein the services can be associated with and utilize resources within the cloud environment. A service expiration component associates reservations with the services, periodically determines a status of the reservations and of any expired services associated therewith, and instructs the system to release the resources of expired services, for use by other services.

Abstract: In accordance with an embodiment, described herein is a system and method for supporting clustering in a multitenant application server environment. The system includes a domain with a plurality of server clusters, and a plurality of partitions, wherein each cluster is homogenously configured and targeted by one or more partitions. An application programming interface (API) can be used to initiate a resource group across-cluster migration within a partition. The API can invoke a replication manager, which queries a target cluster for a runtime topology for use in determining where to store primary session; migrates the primary session to a determined server instance in the target cluster. Additional clustering features, such as cluster messaging service, leasing service, singleton service management, session replication, clustered JNDI, and use of domain front-end load balancing, can be supported.

Abstract: In accordance with an embodiment, described herein is a system and method for supporting patching in a multi-tenant application server environment. The system can associate one or more partitions with a tenant, for use by that tenant, wherein a partition is a runtime and administrative subdivision or slice of a domain. A patching process can take advantage of high-availability features provided by an application server clustering environment, to apply patches in a controlled, rolling restart, which maintains a domain's ability to operate without interruption, or with zero downtime. The process can be used to automate complex or long running tasks, including preserving an unpatched or prior version of an application server, application, or other software component for possible rollback, or providing automatic reversion in the event of an unrecoverable error.